$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: ZPEgECm34GBg/Zxr8Z1tVFLkbd6lRZgAZNYD8ACbTP0= Subject key identifier: 68:14:77:5F:5B:FB:AA:B8:D0:89:7D:12:68:1F:B3:5E:C6:9A:50:51 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 02FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 02B5 Signing time: Mon 11 Aug 2025 02:06:12 +0000 Manifest this update: Mon 11 Aug 2025 02:06:11 +0000 Manifest next update: Mon 18 Aug 2025 02:06:11 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: 0USHPjMV+DO6J42a8XMYyKu8Tmrl8CSeJga1OGEgL2k=) 2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: 5QlFZohbvIA8ksl+8t96mctXoilfacTZ8jEUeG+PwoA=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 763 (0x2fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Aug 11 02:06:11 2025 GMT Not After : Aug 18 02:06:11 2025 GMT Subject: CN=68995013-2a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1a:9c:b9:f7:64:a0:cd:d7:0f:95:06:a1:e7: 4b:fc:6e:df:1c:75:da:83:27:a1:b0:6b:85:85:1e: bb:65:da:f4:fb:e1:d1:d3:87:3a:6a:ce:dc:8c:56: 9f:65:c6:23:05:cb:98:06:4b:50:da:1f:d7:21:6c: d6:e6:0a:82:ea:3f:a1:c8:6d:3c:1f:da:18:c0:99: 5a:d4:39:57:d4:90:87:84:4e:f5:45:fd:56:94:a0: d5:35:7c:bc:8d:de:05:e3:af:01:ce:a2:88:68:ff: 56:bc:71:0d:f3:12:5b:23:4f:9f:2e:87:10:8e:70: ce:93:d8:28:09:1b:72:32:d9:d9:96:44:25:e4:97: 7d:20:9b:71:f1:44:2c:29:b5:c5:26:86:c6:bc:d4: 5b:d3:f0:ef:00:95:3f:70:f9:3b:95:6d:4e:85:47: 7b:b2:bb:a8:fa:71:55:37:e3:23:a6:bc:51:07:41: 71:14:6e:6a:e6:44:2e:f7:8f:70:76:e1:c7:6a:ae: 1c:b2:cb:47:6e:e3:84:be:5d:99:e6:c8:c8:13:ba: 02:d1:1c:7f:de:df:32:30:b9:80:dc:64:b1:dc:29: a9:98:7e:36:bc:60:c5:81:ff:a5:95:16:43:65:de: 52:f0:e0:e3:34:dc:0b:c3:c6:d7:75:b9:fd:79:9e: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:14:77:5F:5B:FB:AA:B8:D0:89:7D:12:68:1F:B3:5E:C6:9A:50:51 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fd:b1:01:46:99:2c:b6:53:5a:43:ed:69:db:27:2c:cf:ec: 4a:dd:ff:95:48:82:83:34:b3:20:f4:62:a2:f9:f7:cf:6a:7d: 18:e0:f6:28:63:ae:4f:6a:58:75:75:06:2a:41:27:56:10:df: 5f:15:71:98:bc:58:fa:69:ef:a5:a8:fa:96:b3:89:a3:35:fa: 73:d3:3b:fc:bd:a8:52:8b:d7:8c:d1:bc:3f:f8:a5:76:6c:d1: 86:47:ec:19:1c:8a:ba:95:f1:57:17:63:9d:e6:b4:03:b3:2f: b3:44:34:be:1c:35:95:b6:42:98:df:c4:56:9a:0f:63:88:b2: e8:41:a6:27:e5:40:ac:58:3a:06:a8:4a:0d:36:0b:14:ca:d2: 96:1d:7c:f4:d5:87:ee:57:05:bb:8f:4a:af:36:dc:fd:c7:3f: 9e:0b:49:8e:8b:9c:b7:dc:92:9e:9b:5a:dd:15:50:2e:85:e4: 5f:30:8d:c3:cb:55:3c:f5:59:00:da:61:c9:0e:05:02:be:91: c1:9e:3e:1b:2c:ed:60:f0:23:77:cc:23:83:ce:7d:06:3e:83: 20:db:d0:5d:3e:dd:d9:d0:d6:a4:9b:13:ae:a6:48:ea:cb:90: dc:a8:8b:b2:e0:02:41:7c:76:60:b4:d0:c9:21:03:2e:65:58: 9e:61:40:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwODExMDIwNjExWhcNMjUwODE4MDIwNjExWjAYMRYwFAYD VQQDEw02ODk5NTAxMy0yYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlxqcufdkoM3XD5UGoedL/G7fHHXagyehsGuFhR67Zdr0++HR04c6as7cjFaf ZcYjBcuYBktQ2h/XIWzW5gqC6j+hyG08H9oYwJla1DlX1JCHhE71Rf1WlKDVNXy8 jd4F468BzqKIaP9WvHEN8xJbI0+fLocQjnDOk9goCRtyMtnZlkQl5Jd9IJtx8UQs KbXFJobGvNRb0/DvAJU/cPk7lW1OhUd7sruo+nFVN+MjprxRB0FxFG5q5kQu949w duHHaq4csstHbuOEvl2Z5sjIE7oC0Rx/3t8yMLmA3GSx3CmpmH42vGDFgf+llRZD Zd5S8ODjNNwLw8bXdbn9eZ5GFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgUd19b +6q40Il9Emgfs17GmlBRMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa/bEBRpkstlNaQ+1p2ycsz+xK3f+VSIKDNLMg9GKi+ffPan0Y4PYo Y65Palh1dQYqQSdWEN9fFXGYvFj6ae+lqPqWs4mjNfpz0zv8vahSi9eM0bw/+KV2 bNGGR+wZHIq6lfFXF2Od5rQDsy+zRDS+HDWVtkKY38RWmg9jiLLoQaYn5UCsWDoG qEoNNgsUytKWHXz01YfuVwW7j0qvNtz9xz+eC0mOi5y33JKem1rdFVAuheRfMI3D y1U89VkA2mHJDgUCvpHBnj4bLO1g8CN3zCODzn0GPoMg29BdPt3Z0NakmxOupkjq y5DcqIuy4AJBfHZgtNDJIQMuZVieYUC5 -----END CERTIFICATE-----Generated at Mon Aug 11 04:25:31 2025 by rpki-client